In Part 3 of our conversation with Tim Freestone, Chief Strategy Officer at Kiteworks, we dig into the findings of the company's fifth annual Data Security and Compliance Risk Survey -- and the numbers are sobering. Eighty percent of organizations experienced a security or AI incident in the past year. Sixty-three percent of those incidents produced a compliance consequence. And half of organizations still cannot produce a complete AI data access audit record within one business day.

But the bigger story is what's driving the exposure. Tim breaks down why organizations with the largest security budgets are not necessarily achieving the highest maturity scores, why shadow AI has given way to a more dangerous problem -- sanctioned AI spawning vibe-coded apps with unvetted security flaws -- and why the governance gap is widening even as deployment accelerates.

He also lays out the three control planes every organization should have in place before significantly expanding agentic AI: identity, action, and data -- with data as the most critical and most overlooked.

Tim Freestone is Chief Strategy Officer at Kiteworks. Follow their work at kiteworks.com and on Substack at The Kiteworks Control Plane.

In this episode of the SecurityDNA podcast, Editorial Director Steve Lasky continues a conversation with Scott Brothers, COO of Oncam, that began on the show floor at ISC West in April.

Brothers, who spent 16 years as an integrator before moving to the vendor side, brings a pointed rebuttal to the industry's cloud-first narrative. His central argument: physical security generates too much data, and enterprise requirements vary too widely, for an all-cloud model to work the way it has in banking or streaming. Hybrid architecture, in his view, is not a transitional phase but a durable outcome, with cloud functioning as an enabler for exceptions and distribution rather than a wholesale storage replacement.

The discussion also covers what the Brivo–Eagle Eye Networks merger signals about industry consolidation, why integrators are financially torn between CapEx-driven business models and the pull toward recurring revenue, and what true interoperability looks like when a vendor relationship ends.

Brothers is direct about AI's operational value versus its marketing packaging, and he flags rising cloud-processing costs as the next issue end users need to interrogate before committing to a long-term platform.

AI-generated deepfakes are advancing so fast that video — long the gold standard of evidence in legal proceedings, compliance audits, and security investigations — can no longer be assumed authentic. So what does that mean for the 90 million surveillance cameras recording across the country right now?

At Milestone XPerience Days (MXD) in Las Vegas, SecurityInfoWatch Editor-in-Chief Rodney Bosch sat down with Jason Crawforth, Founder & CEO of SWEAR, to discuss the accelerating threat to video integrity and why his company believes proving authenticity from the moment video is captured is the key to deepfake detection.

Crawforth makes a compelling case: the legal system is already shifting the burden of truth. Jurors who consume fake content daily are increasingly skeptical of video evidence. And the cat-and-mouse game of deepfake detection is one that AI will always eventually win. SWEAR's approach — using steganography, advanced hashing, and blockchain to embed "digital DNA" into every pixel, frame-by-frame, in real time — takes AI out of the equation entirely by creating an independent chain of custody from camera to courtroom.